[Solved] What is wrong with this Elasticsearch role definition?{"role": {"cluster": ["all"], "indices": [{"names": "logs-*", "privileges": ["read"]}]}} | Elasticsearch

Elasticsearch - Security

What is wrong with this Elasticsearch role definition?

{"role": {"cluster": ["all"], "indices": [{"names": "logs-*", "privileges": ["read"]}]}}

AThe 'privileges' field cannot include 'read'

BThe 'names' field should be an array, not a string

CThe 'cluster' privileges cannot be 'all'

DThe role is missing a 'run_as' field

Step-by-Step Solution

Solution:

Step 1: Check 'names' field format
Elasticsearch expects 'names' to be an array of strings.
Step 2: Identify the error
Here, 'names' is a string instead of an array, causing a syntax error.
Final Answer:
The 'names' field should be an array, not a string -> Option B
Quick Check:
'names' must be an array [OK]

Quick Trick: 'names' must be an array, not a string [OK]

Common Mistakes:

MISTAKES

Master "Security" in Elasticsearch

9 interactive learning modes - each teaches the same concept differently

More Elasticsearch Quizzes

What is wrong with this Elasticsearch role definition?